Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/927C8B46AE6911EC90E39D60C4F9AE02.roa
File: 927C8B46AE6911EC90E39D60C4F9AE02.roa (raw, json)
Hash identifier: dTDnBlWmDv7b/xHkJ/pDIKmSTaHJ48YmE51hkqIE6kQ=
Subject key identifier: DB:8C:18:01:C0:EA:BE:AD:5A:A0:FB:A0:BA:4B:1A:EF:2B:06:80:C0
Certificate issuer: /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial: 01DE
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/927C8B46AE6911EC90E39D60C4F9AE02.roa
Signing time: Mon 17 Apr 2023 05:04:44 +0000
ROA not before: Mon 17 Apr 2023 05:04:44 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 149514
IP address blocks: 103.181.162.0/24 maxlen: 24
103.181.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Feb 2024 15:17:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Validity
Not Before: Apr 17 05:04:44 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=643cd36b-1000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ab:5f:0f:93:59:0e:06:14:ba:e6:1a:f4:f1:
d6:e8:7e:99:78:2c:b4:7d:fb:d5:d5:f5:06:87:c9:
55:ae:91:e9:80:b9:96:f5:13:8c:0d:33:47:fb:f7:
a9:af:7c:5c:e4:39:21:44:06:84:72:1a:01:e7:ca:
6e:84:e1:da:0b:a3:19:15:38:a8:de:da:8b:f7:e3:
ee:a0:fc:f3:ec:e3:06:db:20:00:5d:8c:33:35:3b:
42:bd:d8:a0:ef:4f:b0:58:4a:52:c6:96:17:50:cc:
dd:9c:9f:a9:61:04:e0:3a:a0:c8:31:59:5c:28:c3:
0e:05:d8:6a:95:90:93:d3:28:d0:9a:05:79:d8:22:
e6:f8:a9:aa:0d:27:eb:b6:49:bc:af:56:91:91:35:
b0:32:d0:b7:6f:47:eb:bb:e5:80:b4:98:56:4f:b6:
dc:b9:e5:9a:ae:f2:39:92:53:bf:a6:33:25:80:7c:
99:5e:26:ac:a6:5c:57:1a:d8:8a:0d:53:ea:14:7b:
69:a0:5c:cb:1a:2d:eb:7e:67:36:74:e1:ca:eb:58:
37:fb:3d:29:27:d8:44:a9:a6:4a:c3:ee:e0:ae:59:
b0:bf:78:56:8a:c3:5a:19:f7:8c:f5:73:39:c6:0f:
8d:26:0f:93:88:5d:dc:26:9d:96:80:91:0d:3d:a7:
6a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:18:01:C0:EA:BE:AD:5A:A0:FB:A0:BA:4B:1A:EF:2B:06:80:C0
X509v3 Authority Key Identifier:
keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/927C8B46AE6911EC90E39D60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.162.0/23
Signature Algorithm: sha256WithRSAEncryption
01:a8:ca:6a:16:06:5a:23:1e:76:df:f4:e7:78:ae:6a:6c:79:
72:0b:a4:fa:24:a5:44:d5:93:b1:50:f6:be:fa:34:7d:32:24:
9c:20:ec:65:c9:60:61:5d:6b:55:f8:e3:99:50:d8:eb:fa:8f:
16:8e:8a:28:e6:b8:c6:51:a0:23:d0:43:e9:8f:48:9f:4d:e5:
65:58:84:94:73:a6:4c:d5:fa:a9:8c:e6:fb:c4:c1:a1:ce:2c:
c2:54:d1:c5:39:70:c4:1f:2a:bf:ec:10:4d:60:1f:28:f5:8a:
d9:33:21:92:42:ad:f1:7a:3f:af:d1:bb:8d:87:3b:d0:27:b7:
cb:95:6e:6f:37:60:15:2c:ba:5c:d4:f3:05:5f:67:da:a1:84:
5b:ee:6a:de:13:b6:ff:cc:c4:75:bf:09:28:42:e7:b8:29:e4:
ed:04:28:2d:36:12:b1:8b:77:d5:88:94:0e:05:cb:f9:6a:e9:
ac:7f:e3:2d:9c:1e:f1:f0:99:aa:90:c6:a3:c5:34:ce:00:de:
09:46:39:46:36:ec:03:83:fc:bc:ae:4b:85:ea:21:ff:3c:ab:
ff:54:f5:b3:ab:54:c3:5e:cd:c2:6d:d2:61:fc:0f:05:ee:c3:
20:54:90:ce:28:dc:c8:bb:6b:22:89:63:de:aa:78:05:17:2e:
64:bd:5a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 18:02:03 2024 by rpki-client on console-ams.rpki-client.org